Privacy Policy
Last updated: March 2026
This privacy notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to users who interact with the website teglio850.it.
1. Data Controller
The data controller is the owner of the website teglio850.it, a private individual. For any communication regarding personal data protection, you may write to:
Email: privacy@teglio850.it
2. Purposes and Legal Bases for Processing
Personal data is processed for the following purposes:
a) Handling enquiries about the land
Data provided through the contact form (name, email, phone number, message) is processed to respond to enquiries regarding the buildable land for sale.
Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
b) AI chatbot operation
The website provides an AI-powered virtual assistant. Messages sent to the chatbot are processed to provide relevant answers about the land's characteristics and surrounding area.
Legal basis: legitimate interest of the controller in offering an effective information service (Art. 6(1)(f) GDPR).
c) Browsing behaviour analysis
With the user's consent, the website collects anonymous browsing data (scroll depth, time spent on pages, pages visited) to improve the browsing experience through contextual suggestions.
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).
d) Website security and technical logs
The website automatically collects technical information (IP address, user-agent, date and time of access) to ensure the security and proper functioning of the service.
Legal basis: legitimate interest of the controller in IT security (Art. 6(1)(f) GDPR).
3. Data Processed
The categories of personal data processed are:
- Identification data: name, surname, email address, phone number (voluntarily provided via the contact form)
- Message content: text of messages sent through the contact form and chatbot
- Technical data: IP address, browser user-agent, date and time of access
- Browsing data: scroll depth, time spent on pages, pages visited, exit events (collected only with consent)
4. Data Processing Methods
Personal data is processed using electronic and digital tools, following procedures strictly related to the stated purposes and in a manner that ensures data security and confidentiality. Appropriate technical and organisational security measures are in place to protect data from unauthorised access, loss, or destruction.
5. Data Retention Periods
Personal data is retained only for the time strictly necessary to fulfil the purposes for which it was collected:
| Data type | Retention period |
|---|---|
| Contact data (name, email, phone) | 24 months from collection |
| Technical logs (IP, user-agent) | 90 days |
| Chat data (chatbot messages) | Session duration + 30 days |
| Browsing data | 30 days |
6. Data Recipients
Personal data may be shared with the following third parties, acting as data processors:
- VPS hosting provider (server located in the European Union) — for hosting services
- Resend Inc. (USA) — for sending transactional emails, with safeguards based on Standard Contractual Clauses (SCCs)
- Anthropic PBC (USA) — for AI chatbot operation, with safeguards based on Standard Contractual Clauses (SCCs)
- Telegram FZ-LLC (United Arab Emirates) — for sending notifications to the data controller about new enquiries
7. International Data Transfers
Some of the services used involve the transfer of personal data to third countries (United States, United Arab Emirates). These transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, pursuant to Art. 46(2)(c) GDPR, which ensure an adequate level of protection for personal data.
8. Rights of the Data Subject
As a data subject, you have the right to:
- Access — obtain confirmation of the existence of your data and receive a copy (Art. 15 GDPR)
- Rectification — request the correction of inaccurate data or the completion of incomplete data (Art. 16 GDPR)
- Erasure — request the deletion of your data in the cases provided by law (Art. 17 GDPR)
- Restriction — request the restriction of processing in the cases provided (Art. 18 GDPR)
- Objection — object to processing based on legitimate interest (Art. 21 GDPR)
- Data portability — receive your data in a structured, commonly used, machine-readable format (Art. 20 GDPR)
To exercise your rights, you may write to privacy@teglio850.it.
You also have the right to lodge a complaint with the competent supervisory authority: Garante per la Protezione dei Dati Personali (Italian Data Protection Authority) — www.garanteprivacy.it.
9. Profiling and Automated Decision-Making
The website does not carry out any profiling activities nor does it adopt decisions based solely on automated processing that produce legal or similarly significant effects on the data subject.
The contextual suggestion system (nudge) uses predefined rules based on browsing behaviour to improve the user experience on the website, without identifying or profiling individual visitors.
10. Changes to This Privacy Notice
The data controller reserves the right to amend this privacy notice at any time by publishing updates on this website. Please check this page regularly for any changes.